Methods and apparatus consistent with the invention provide the ability to organize and build understandings of machine data generated by a variety of information-processing environments. Machine data is a product of information-processing systems (e.g., activity logs, configuration files, messages, database records) and represents the evidence of particular events that have taken place and been recorded in raw data format. In one embodiment, machine data is turned into a machine data web by organizing machine data into events and then linking events together.
Legal claims defining the scope of protection, as filed with the USPTO.
2. The method as recited in claim 1, further comprising segmenting the first portion of the machine data and the second portion of the machine data based on one or more aggregation rules.
4. The method as recited in claim 1, wherein each of the at least one first event and the at least one second event comprise one or more lines of machine data.
5. The method as recited in claim 1, wherein the at least one second event includes the at least a subset of the first portion of the machine data.
6. The method as recited in claim 1, further comprising segmenting a third portion of the machine data from a third data resource into the third event.
7. The method as recited in claim 1, further comprising identifying a fourth event that includes the at least a subset of the first portion of the machine data.
9. The method as recited in claim 1, wherein the at least a subset of the first portion of the machine data comprises one or more tokens, keywords, or punctuation structures.
10. The method as recited in claim 1, wherein the at least a subset of the first portion of the machine data is associated with an event type.
11. The method as recited in claim 1, wherein the at least a subset of the first portion of the machine data is associated with an event type, the method further comprising generating statistical information for the event type.
12. The method as recited in claim 1, wherein the at least a subset of the first portion of the machine data is associated with an event type, the method further comprising generating statistical information for the event type, wherein the statistical information is accessible via an interface.
13. The method as recited in claim 1, further comprising associating a time stamp with the at least one first event.
14. The method as recited in claim 1, wherein the at least a subset of the first portion of the machine data comprises a semantic entity or an extracted entity.
15. The method as recited in claim 1, wherein the at least a subset of the first portion of the machine data comprises a value of a semantic entity or an extracted entity.
16. The method as recited in claim 1, further comprising determining a number of events associated with the at least a subset of the first portion of the machine data.
17. The method as recited in claim 1, wherein the at least a subset of the first portion of the machine data is associated with an event value.
18. The method as recited in claim 1, wherein a first data format of the first portion of the machine data and a second data format of the second portion of the machine data identify a time stamp.
Cooperative Patent Classification codes for this invention. Click any code to explore related patents in that topic.
September 20, 2021
May 30, 2023
Browse 5M+ US patents with plain-English claim translations and AI-generated analysis.